Patent attributes
A method includes receiving first metrics describing first behaviors of applications having a fault, and second metrics describing second behaviors of an enterprise system in which the applications are executing. The first and second metrics are ingested. Ingesting includes assigning a first cardinality score to first metrics related to the fault. Ingesting also includes assigning a second, lower cardinality score to second metrics that are unrelated to the fault. Tumbling window processing is performed on the ingested metrics by sorting the first metrics and the second metrics into time slices. Each of the time slices includes a corresponding data structure for storing the data in the different time periods. Tumbling window processing is also performed on the ingested metrics by storing more data in the time slices for the first metrics having the first cardinality score relative to the second metrics having the second cardinality score.
